Commit graph

10842 commits

Author SHA1 Message Date
Tony Ambardar
9351266328 stubby: fix config file definition
The config file /etc/stubby/stubby.yml is not registered properly and any
local changes are being overwritten on upgrade or reinstall.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2019-01-31 23:41:51 +00:00
Tony Ambardar
d3b090a311 stubby: rearrange Makefile for clarity
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2019-01-31 23:41:51 +00:00
Tony Ambardar
a3a73ef7bc stubby: add missing dependency on ca-certificates
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2019-01-31 23:41:51 +00:00
Jonathan G. Underwood
ccf0c71ace getdns: update to version 1.5.0
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2019-01-31 23:41:45 +00:00
David Mora
07e6476454 getdns: Remove iamperson347 from maintainer
I am no longer able to support maintaining the getdns lib for openwrt. I suggest Jonathan Underwood <jonathan.underwood@gmail.com> as a replacement.
2019-01-31 23:41:38 +00:00
Hannu Nyman
6e7207c94e
Merge pull request #8094 from candrews/patch-2
getdns: fix missing libbsd dependency
2019-01-31 20:12:48 +02:00
Craig Andrews
ca7555e52d
getdns: fix missing libbsd dependency
Backport these commits from master to the 18.06 branch:
8365744b80
035b22b208
d0766135ad

Fixes https://github.com/openwrt/packages/issues/8093

Signed-off-by: Craig Andrews <candrews@integralblue.com>
2019-01-31 13:06:08 -05:00
Adrien DAURIAT
cc8439566f acme: Fix loading credentials
Move loading credential function before cert renewal call as credentials might be needed for some renewal operations ( ex: DNS )

Signed-off-by: Adrien DAURIAT <16813527+dauriata@users.noreply.github.com>
2019-01-31 15:16:33 +01:00
Hannu Nyman
fc42664a18
Merge pull request #8077 from BKPepe/openwrt-18.06
[openwrt-18.06] youtube-dl: update to version 2019.01.30.1
2019-01-30 23:09:39 +02:00
Josef Schlehofer
fb3dd71efd
youtube-dl: update to version 2019.01.30.1
Add Josef Schlehofer as Co-maintainer to be able to track issues

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-01-30 14:29:53 +01:00
Hannu Nyman
911bbd6bb4
Merge pull request #8048 from jefferyto/openwrt-18.06-python-idna
[openwrt-18.06] python-idna: Add missing dependency on python(3)-codecs
2019-01-27 23:05:41 +02:00
Jeffery To
4368783e97 python-idna: Add missing dependency on python(3)-codecs
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-01-27 20:26:48 +08:00
Hannu Nyman
88cdd51d30
Merge pull request #7945 from jefferyto/openwrt-18.06-python-lib2to3-pyc-fix
[openwrt-18.06] python/python3: Fix lib2to3 fixes search
2019-01-27 11:58:13 +02:00
Jeffery To
480e4d7e88 python/python3: Fix lib2to3 fixes search
This is the patch from c98b12d9a9 (#7931),
applied for both python 2 and 3.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-01-13 06:14:36 +08:00
Hannu Nyman
6f84d68c94
Merge pull request #7799 from cshoredaniel/pr-nut-runas-backport
[18.06] nut: Default to run as root but fix alt runas
2019-01-02 18:02:23 +02:00
Peter Wagner
02dd97d148 libsndfile: update to 42132c543358cee9f7c3e9e9b15bb6c1063a608e
Fixes CVE-2018-19758
2019-01-02 01:06:23 +01:00
Hannu Nyman
85bfefb561
Merge pull request #7757 from jefferyto/openwrt-18.06-python-dist-info
[openwrt-18.06] python/python3: fix .dist-info missing for setuptools and pip
2019-01-01 21:55:43 +02:00
Hannu Nyman
94b3e50e04
Merge pull request #7820 from commodo/18-06-python3-CVE-2018-14647
[18.06] python3: backport CVE-2018-14647 patch from upstream
2018-12-31 22:33:38 +02:00
Hannu Nyman
8f988efb92
Merge pull request #7819 from commodo/18-06-python-CVE-2018-14647
[18.06] python: backport CVE-2018-14647 patches from upstream
2018-12-31 22:32:58 +02:00
Alexandru Ardelean
34dec81901 python3: backport CVE-2018-14647 patch from upstream [18.06]
These patches are backports from Python 3.6 upstream.
The security issue is described here:
  https://nvd.nist.gov/vuln/detail/CVE-2018-14647

The Python bug report:
  https://bugs.python.org/issue34623

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-12-31 19:20:27 +02:00
Alexandru Ardelean
3785db429f python: backport CVE-2018-14647 patches from upstream [18.06]
These patches are backports from Python 2.7 upstream.
The security issue is described here:
  https://nvd.nist.gov/vuln/detail/CVE-2018-14647

The Python bug report:
  https://bugs.python.org/issue34623

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-12-31 18:58:19 +02:00
Rosen Penev
931070c26d jool: Backport two fixes for newer kernels.
The first is needed for 4.14 (maybe the relevant parts got packported and
the second is for when OpenWrt migrates to 4.19.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4f28139a3c)

Signed-off-by: Daniel Albers <Daniel.Albers@public-files.de>
2018-12-30 16:16:36 +01:00
Daniel F. Dickinson
8f41fa7f82 nut: Default to run as root but fix alt runas
Since the new hotplug script in master was not backport (new feature),
for 18.06 branch revert the old behavior of running NUT daemons and
drivers as root by default to avoid permisions problems, but backport
fix the support for running as another user for those who can set the
appropriate permissions on the USB (or other) device.

Closes: #7742

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-12-28 16:18:26 -05:00
Peter Wagner
f7048b725d libsndfile: update to 8ddc442d539ca775d80cdbc7af17a718634a743f
a/ulaw: fix multiple buffer overflows

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-25 04:04:46 +01:00
Jeffery To
e3f32b75b3 python/python3: fix .dist-info missing for setuptools and pip
Without .dist-info (similar to .egg-info), setuptools and pip are not
discoverable by pkg_resources.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-12-23 03:28:02 +08:00
champtar
d05b98c6c8
Merge pull request #7733 from micmac1/openwrt-18.06-sqlite-fpic
(18.06) sqlite3: remove fpic, change maintainer
2018-12-20 19:08:45 +01:00
Sebastian Kemper
e814c888d0 sqlite3: change maintainer
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-12-20 18:44:48 +01:00
Sebastian Kemper
578762f4fc sqlite3: remove $(FPIC)
Defaulting to -fPIC is a bad idea, especially for executables (here:
sqlite3-cli). In short, there are certain security implications as well
as overhead/performance penalties. Details see:

https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals

The configure script is able to detect the need for PIC and adds the
flag when needed anyway (when compiling the library).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-12-19 20:24:17 +01:00
champtar
8b4118cd7b
Merge pull request #7726 from micmac1/openwrt-18.06-sqlite3
(18.06) sqlite3 security bump
2018-12-18 22:46:08 +01:00
Sebastian Kemper
68694dddb1 sqlite3: security bump
A remote code execution vuln has been found in sqlite. Infos available
here:

https://blade.tencent.com/magellan/index_en.html

sqlite 3.26.0 contains the fix.

This commit also changes source URL to https.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-12-18 21:12:47 +01:00
Karl Palsson
13a4dcd614 net/mosquitto: bump to 1.5.5
Security and bug fix.  Full changelog available at: https://mosquitto.org/ChangeLog.txt

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-12-17 10:55:34 +00:00
Ted Hess
3e4fae2465 CircleCI: [18.06] branch specific version.
Add package checks and HASH verify from Travis. Fix build log generation.

Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-12-11 15:56:29 -05:00
Hannu Nyman
c95a1d3da8
Merge pull request #7638 from cshoredaniel/pr-nut-backport
[18.06] nut: Backport fixes from master
2018-12-11 18:42:14 +02:00
Daniel F. Dickinson
bb1b12733e nut: Backport fixes from master
Backport and squash the following commits from master:

  5790053eb nut: Add missing conffiles
  ceff68837 nut: Reorganize nut-server to clarify nut-driver
  f6a2a97d2 nut: Use 'real' procd init for nut-monitor
  918a62f91 nut: Make FSD really work
  a2f64b3ba nut: Reduce user error with POWERDOWNFLAG
  461393810 nut: Use quotes around filenames
  1b6dbe7a7 nut: Remove duplicate/extraneous lines
  0a49d0ffb nut: Fix checking for path before it exists
  3b5a8eee8 nut: Various startup fixes for monitor and server
  44e57d4bd nut: Fix variables for NUT drivers
  36fd59dc7 nut: Fix extraneous config_get
  192b0f164 nut: Fix a typo in setting a driver parameter
  f48b060fa nut: Fix upsd runs as root

And bump PKG_RELEASE

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-12-11 07:19:15 -05:00
Rosen Penev
e6769fc7ef libsndfile: Fix MIRROR_HASH
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-07 06:18:21 +01:00
Hannu Nyman
19ca64fc81
Merge pull request #7554 from micmac1/tiff-4010-18.06
(openwrt-18.06) tiff: security bump to 4.0.10
2018-12-06 10:36:21 +02:00
Peter Wagner
f432140863 libsndfile: add PKG_SOURCE_DATE
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-03 23:10:36 +01:00
Peter Wagner
18c3166385 libsndfile: switch to cmake
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-03 20:40:11 +01:00
Peter Wagner
6124b001e9 libsndfile: switch to git
Fixes CVEs:
CVE-2017-6892
CVE-2017-8361
CVE-2017-8362
CVE-2017-8363
CVE-2017-8365
CVE-2017-12562
CVE-2017-14245
CVE-2017-14246
CVE-2017-14634
CVE-2018-13139
CVE-2018-13419

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-03 20:39:59 +01:00
Sebastian Kemper
e802a0c008 tiff: security bump to 4.0.10
This bumps libtiff's minor version from 9 to 10. In addition to the CVE
fixes that we already included this fixes:

CVE-2017-17095
CVE-2018-17101
CVE-2018-18557

The update is 100% backwards compatible, no symbol changes.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-12-02 11:31:19 +01:00
Rosen Penev
b9b3445cc0 tree: Update to 1.8.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>

(cherry picked from commit dbe1c48c53)
2018-12-01 13:29:16 +02:00
Karl Palsson
890c302e1a net/mosquitto: support more acl plugin options
Adds support for acl_plugin, and acl_opt_* options.
acl_opt_* requires some care as it relies on the internal behaviour of
cfg_load setting environment variables in a certain form.  However,
given that _all_ of the cfg_load infrastructure relies on that, we can
be pretty sure that it won't change in a way that will hurt us.

Originally reported as: https://github.com/openwrt/packages/pull/7434

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-11-27 16:54:37 +00:00
champtar
469bcb5ea1
Merge pull request #7481 from padre-lacroix/darkstat-18.06
darkstat: [18.06] procd init script and enabling additional parameters
2018-11-26 19:57:01 -05:00
Jean-Michel Lacroix
8643915bbd darkstat: [18.06] procd init script and enabling additional parameters
This is the same change as the one on master
This is to change the init script to a procd init script
This also enable some additional parameters in the binary that
were present but not enabled:
The export file (option export_file)
The import file (option import_file)
The daylog (option daylog_file)
These are disabled by default.  Also, the option to run as a daemon
is removed, as not compatible with procd.

There is no change in the binary.

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>
2018-11-26 18:12:14 -05:00
Leonid Evdokimov
8ccfae065f prometheus-node-exporter-lua: close io.popen files to reap zombies
Signed-off-by: Leonid Evdokimov <leon@darkk.net.ru>
2018-11-25 16:56:38 -05:00
Ted Hess
430f6c0164 build,circleci: Updates with additional checks from travis scripts.
Checking:
- Pull request does not contain unwanted merges
- signed-off-by tag exists and matches author
- Subject line has package name
- Author name has 'firstname lastname' (no nicknames)

Signed-off-by: Ted Hess <thess@kitschensync.net>
[Use git instead of CircleCI variables]
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2018-11-24 22:23:34 -05:00
Etienne Champetier
677eb7ec2b build,circleci: add curl & wget to base image
curl was present in latest image but seems to have been remove from latest debian:9

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2018-11-24 22:23:06 -05:00
Hannu Nyman
7370760f5d nano: update to 3.2
Update nano to version 3.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ea656e25a2)
2018-11-24 16:49:45 +02:00
Hannu Nyman
1f2f177d3c collectd: update to 5.8.1
Update collectd to version 5.8.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 29eac13d8f)
2018-11-24 16:49:45 +02:00
Hannu Nyman
44458746f2 collectd: remove obsolete references to avr32
Backport the collectd portion of the treewide changes
made by e38c10061 in master

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-24 16:49:45 +02:00